Two-Tier Subagent Permission Scoping

Description

When allowedTools is explicitly provided to runAgent(), SDK-level permissions from --allowedTools are preserved (apply to all agents) but session-level rules are replaced by the subagent's declared allowedTools. Without explicit allowedTools the parent's session-level rules are inherited.

Key claims

Relations

Sources

src-20260423-0cff68d3291b